Senior Enterprise Architect - Identity and Access Management - Security

Role

• Global architect for all Identity and Access Management Platforms: Hybrid identities (cloud and on-premise Identities), Enterprise Application Integration, Authentication Methods, Conditional Access.
• The business solution architect for any direct business request.
• Defines standards, roadmaps, strategies, missions and visions for the Identity and Access Management on premise as well as in the cloud with a big focus on security.

Projects

• Migrate federated applications from ADFS to Azure AD for over 400 Applications.
• Migrate to PHS from federated authentication.
• MFA and SSPR rollout.
• Secure application access with Azure AD Conditional Access.
• Support the Intune rollout project.
• Configure Windows Hello for Business – key trust.
• Rollout passwordless authentication methods like Windows Hello for Businesss, Phone Signin and Fido2
• Document supported authentication flows OAuth, OIDC and SAML

Role
* Global engineer for all Identity and Access Management Services: Hybrid identities (Microsoft
cloud/azure Active Directory and on-premise Active Directory), DHCP, DNS, Active Directory
Federation Service, Group Policies, Private Key Infrastructure)
* Globally responsible for the above services.
* The overall IT Champion for all these services.

Key Responsibilities
* Ensure all Identity and Authentication Services and windows network services are stable,
reliable and innovative in all sites of the adidas Group.
* Defines standards (software, hardware, support and administration) for the above services
globally.
* Responsible that the Identity and Windows network Service Level objectives are achieved.
* Administration of all the above services.

Bigger Projects
* Support the O365 global rollout with securing access to it from managed devices only with
Azure AD Conditional Access.
* Migrate ADFS 2.0 to ADFS3.0 - refresh hundreds of SSO setups.
* Migrate application publishing from Microsoft Treat Management Gateway (TMG) to Big-IP F5 APM.
* Implemented Azure AD Password Protection

Duties:
* Configuration/Administration of the existing Active Directory Forests
* Deploy new AD Forests for different company needs.
* Integrate Applications with Active Directory
* Enable Single Sign On for different Applications
* Configuring new AD Federated trust relationships with external SaaS Partners
* Publish internal Web-applications through TMG to assure that internal applications are
accessible form outside and comply with the security prerequisites by enforcing
pre-authentication at the DMZ level.
* Apply patches in accordance with company procedures
* Create group policies for servers and client computers.
* Provide support to other teams and regions in a FTS support model

Bigger Projects
* Prepare all Domain controllers in the forest for raising the forest functional level to 2012